Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4a725491-5af0-4695-8b3c-42c5c9adc92b.roa
File:                     4a725491-5af0-4695-8b3c-42c5c9adc92b.roa (raw, json)
Hash identifier:          vGI5gAi1tN3yS+0KYm3V8PYrd6HslTzUxOR/Jt8SrlU=
Subject key identifier:   74:58:1A:CB:EE:B7:CD:86:23:B5:7B:01:C7:99:88:BA:32:5D:B0:3D
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       565EECD4EB61CC8C3E9C51609AF6AFDB76BA4022
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4a725491-5af0-4695-8b3c-42c5c9adc92b.roa
Signing time:             Fri 15 Dec 2023 00:00:00 +0000
ROA not before:           Fri 15 Dec 2023 00:00:00 +0000
ROA not after:            Fri 19 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:5e:ec:d4:eb:61:cc:8c:3e:9c:51:60:9a:f6:af:db:76:ba:40:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 15 00:00:00 2023 GMT
            Not After : Jan 19 23:59:59 2024 GMT
        Subject: serialNumber=269c9cba071f5d52acf0100838fda0d001d388a78a8cdef180023ef0aa5416f7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:df:4d:cd:41:45:e4:8d:c5:2a:79:cb:ce:7f:
                    9f:39:05:24:3c:1e:a8:55:e3:42:69:8f:6b:58:02:
                    67:8d:17:c9:22:db:15:19:7a:e2:78:9e:2f:ff:b6:
                    9e:2a:06:c5:68:db:68:e9:d6:65:40:90:ef:3e:72:
                    81:8c:ee:7c:ef:53:d9:a7:cc:c8:29:c1:f8:09:01:
                    06:12:b6:bf:86:7c:c6:c4:ca:2b:75:ee:1f:3b:c4:
                    26:98:77:e0:6f:54:c1:de:07:13:96:71:2a:31:09:
                    90:b4:c8:31:bc:a6:f1:19:ad:6a:34:a1:d6:79:a6:
                    fe:eb:31:71:be:41:c3:75:d9:31:61:17:7c:37:67:
                    33:e3:e2:15:d3:16:ca:5d:db:8f:0a:31:4d:fb:36:
                    c7:59:52:14:2e:8a:57:34:13:51:9f:ad:09:a5:a7:
                    01:65:0a:d0:4d:dd:49:29:8e:aa:13:50:e5:98:b4:
                    a1:44:94:c0:bf:3e:26:ea:37:34:46:46:eb:f2:9c:
                    a6:8f:58:43:b2:26:50:0d:c8:fd:3d:23:3f:bb:65:
                    1e:f5:1c:86:b3:cf:5b:68:b6:87:99:96:76:7e:66:
                    6c:f0:a5:dd:14:b3:58:01:93:0b:2a:74:20:47:07:
                    33:57:61:2d:4e:3d:08:49:3c:50:a3:d0:c2:d1:5a:
                    b2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:58:1A:CB:EE:B7:CD:86:23:B5:7B:01:C7:99:88:BA:32:5D:B0:3D
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4a725491-5af0-4695-8b3c-42c5c9adc92b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:5e:38:68:df:0d:4b:28:d0:f0:7c:de:10:a5:ed:66:69:ed:
         62:69:fe:c9:eb:d3:81:af:d2:91:a4:7d:22:a7:5f:8a:1e:3a:
         61:0d:11:5f:3f:af:e7:d5:1e:76:18:38:90:5b:e5:83:a6:42:
         64:11:6a:d9:0a:c2:e8:23:aa:09:87:7e:20:4b:07:f6:57:8d:
         a7:4b:ba:0b:3a:ae:db:11:cf:fd:5a:57:01:3f:0a:5f:da:9b:
         9b:5d:01:fa:1c:7c:22:0d:3c:3a:09:91:03:20:24:49:31:01:
         eb:4b:41:7c:fb:52:78:3f:27:2d:94:e1:34:bb:bd:e7:20:77:
         43:c3:9f:f3:d2:0a:68:6e:82:b5:28:8b:0f:20:d5:7d:58:f9:
         28:6c:a0:ce:9e:10:6f:be:69:66:eb:88:76:07:4a:c3:b3:81:
         53:b0:da:b8:6c:d8:bc:eb:25:ce:38:33:b6:13:b0:77:75:d6:
         a0:f8:c1:a8:d5:ee:0e:3b:1b:ce:b8:f4:61:fe:0f:bd:b7:52:
         b3:ae:b6:d0:89:f6:28:7c:31:d1:97:33:95:75:08:2d:92:45:
         45:10:3c:5f:2a:dc:f6:74:69:f0:2b:45:a1:57:b5:e5:9f:de:
         7b:b0:5d:84:6d:81:db:eb:40:3d:74:ec:a5:88:93:34:7a:96:
         a7:74:cf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----